Hacker News new | ask | show | jobs
by DoubleFree 1405 days ago
In general, you don't verify am email address to prove that the user owns it, but to verify they can receive mail on it, for password recovery purposes and account information. Reversing the process verifies the user can send from the address, which is orthogonal to the goal